Privacy policy

Introduction

This policy details the ways in which we collect, process, transfer and dispose of your personal data.

Who are we and how to contact us:

Kin and Carta plc is a company registered in England and Wales which is part of the Kin + Carta group of companies (collectively referred to as “we” or “us” in this policy). Kin+Carta Plc is the Controller for your personal data.

Kin and Carta plc
Registered office address:
One Tudor Street
London
EC4Y 0AH
Registered in England with company number 1552113
Information Commissioner’s Office registration number Z6651639.

You can get in touch with us in any of the following ways:
By email: info@kinandcarta.com
By phone: 020 7928 8844
Through this website: https://www.kinandcarta.com
By post: Kin and Carta plc, One Tudor Street, London, EC4Y 0AH

To contact or Data Protection Team: data.protection@kinandcarta.com

About this privacy policy

This policy sets out how we will use and share the information that you give us. This policy relates to personal data collected by us via the following means:

• Our website(s)
• Email correspondence
• Telephone calls
• Paper communications
• Social media
• Visiting our offices
• Enquiring about or buying products or services from us
• Providing products or services to us
• Trade events such as conferences or exhibitions.

You should be aware that if you access third party websites (including the websites of our subsidiaries), using links provided on our websites, these websites are outside our control and have their own privacy policies governing the use of personal data and we do not accept any responsibility or liability for these policies.

What data we process about you:

We may collect and process the following categories of personal data about you

Contact Details:

• Name, contact details, organisation, employment details (such as job title and/or seniority levels)

Information generated by the work, service or relationship we may have with you:

• Business details, bank and financial details, communication and correspondence

Information generated by visiting our website or engaging with us on social media:

• IP addresses, social handles or usernames

Employment history:

• CV and contact details, should you send us a CV

How we collect information about you and how we will use it:

We may collect any information that you provide during your correspondence with us, this could be, but not limited to, one of the following ways:

• Providing information directly to us by methods including filling in forms either on our website(s) or via other media
• Subscribing to our newsletter
• Requesting any of our goods, services, downloads or other information
• Communicating with us through methods including but not limited to e-mail, telephone and written correspondence
• Business contact details via compliant lead generation third-parties
• Visiting our offices
• Talking to one of our representatives at a trade show

We will only use your personal information when the law allows us to. Most commonly, we will use your personal information in the following circumstances:

• Where you have given consent for us to process your information
• Where we need to perform the contractual obligations, we have entered with you or the business you are working for or with
• Where we need to comply with a legal obligation
• Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests

The purpose(s) we will collect and process your data are shown below:

• To manage our relationship and administer our business either as a part of a contract or where we believe we have a legitimate interest to do so
• To execute a contract or request
• Where we have a legitimate interest to keep you informed of and market our products or services by appropriate communication methods, unless you’ve objected to us doing so
• To consider any CV and share it with our relevant subsidiary companies
• Undertaking legal obligations or regulatory requirements
• Adding it to information we or our subsidiary companies already hold on you or your organisation

Data sharing

Your personal data may be shared with other companies within our group of companies. It may also be disclosed to a third party who may acquire us or one of our subsidiary companies. These include, as of February 2020:

We may also share some of your personal data with the following categories of third parties:

• Marketing agencies who help us promote ourselves or deliver our services
• Printers, email service providers or other suppliers who help us to send any communications
• Suppliers providing services to us to help us run our business

We require third parties to respect the security of your data and to treat it in accordance with the law. We will share your personal information with third parties where required by law.

International Transfer of Data

We may send your data outside the European Economic Area (the European Economic Area being the European Union and Iceland, Liechtenstein and Norway, also referred to as the “EEA”) including to Argentina and USA, Where your personal data is transferred or accessed outside of the EEA, we will ensure that appropriate safeguards are in place.

Your choices in relation to personal information:

It is important that the personal information we hold about you is accurate and current. Please keep us informed if your personal information changes during your relationship with us. You also have the rights and choices which you can exercise on the data we hold on you.

You have the right to:

• Obtain access to your personal information
• Withdraw consent
• Object to direct marketing
• Ask us to correct any errors or delete the information we hold,
• Object or restrict our processing of your information
• Request that we port your personal information

For more information or to action these rights, please contact using us on data.protection@kinandcarta.com

Retention and destruction of personal information

We will take reasonable steps to ensure the accuracy of the information we hold about you. We will not use your personal information unless it is (to the best of our knowledge) accurate and up to date.

We will only retain your personal information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting or reporting requirements. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

In some circumstances we may anonymise your personal information so that it can no longer be associated with you, in which case we may use such information without further notice to you.

When the purposes we collected the data for have ended we will retain and securely destroy your personal information in accordance with applicable laws and regulations. For further details about data retention please contact the data protection officer whose details can be found in this policy.

Data Protection Officer

If you have concerns that you would like to raise with us, please contact our Data Protection Officer:

Jonathon Richmond
Chief Data Protection Officer
data.protection@kinandcarta.com

You also have the right to complain to the Information Commissioner’s Office if you believe we have not acted within the law or have infringed your rights. https://ico.org.uk/for-the-public/

Security

Unfortunately, the transmission of data over the internet is not completely secure. Although we will do our best to protect your personal information, we cannot guarantee its security. Once we have received your data we will use strict security measures to try to protect it against loss, misuse, or unauthorised alterations.

Changes

We may change the terms of this privacy policy from time to time. Any changes will be posted on this page.

This policy was last updated on 29 February 2020.

California Consumer Privacy Act Notice

About this Privacy Notice

Pursuant to the California Consumer Privacy Act of 2018 (“CCPA”), Kin+Carta Plc in scope of the CCPA (“K+C” “we,” “us” or “our”) are providing this California Consumer Privacy Act Notice (“CCPA Notice”). This CCPA Notice supplements our Privacy Policy and applies solely to California consumers, effective February 3rd, 2020. Terms used but not defined shall have the meaning ascribed to them in the CCPA.

2. Personal Information Collected

We collect the following categories of personal information as indicated with a check mark below

A. Identifiers such as a real name, alias, postal address, telephone or mobile contact number, unique personal identifier, online identifier, Internet Protocol address, email address and account name.

B. Personal information as defined in the California customer records law, such as name, contact information, education, employment, employment history and financial information.

I. Professional or employment-related information, such as job title as well as work history and experience in presenter bios collected for events, presentations, marketing collateral and testimonials in connection with our business activities.

K. Inferences drawn from any of the personal information listed above to create a profile or summary about, for example, an individual’s preferences and characteristics.

We collect this personal information from you and from other categories of sources such as:

• our affiliates;
• our customers;
• public and publicly available sources;
• our third-party partners, vendors, data suppliers and service providers;
• partners with which we offer co-branded services or engage in joint event or marketing activities;
• social networks;
• news outlets and related media; and
• the organisation with which you are employed or affiliated.

We share this personal information with:

• our affiliates;
• our vendors, service providers, suppliers, agents and representatives;
• joint venture partners;
• licensors of third-party applications (if you access a third-party application on our services through a license agreement with the licensor); and
• other parties where required by law or to protect our rights.

We may use this personal information to operate, manage, and maintain our business, to provide our products and services, to communicate with you, for our vendor management purposes, and to accomplish our business purposes and objectives, including, for example, using personal information to:

• develop, improve and maintain our products and services;
• process or fulfil a request or other transactions submitted to us;
• personalise, advertise, and market our products and services;
• conduct research, analytics, and data analysis;
• maintain our facilities and infrastructure;
• undertake quality and safety assurance measures;
• conduct risk and security control and monitoring;
• detect and prevent fraud;
• perform identity verification;
• perform accounting, audit, and other internal functions;
• comply with law, legal process, and internal policies;
• maintain records;
• exercise and defend legal claims; and
• fulfil legal obligations.

Personal Information Disclosed

We disclose the following categories of personal information below to our affiliates; our customers; our vendors, service providers, suppliers, agents and representatives; joint venture partners; licensors of third-party applications (if you access a third-party application on our services through a license agreement with the licensor); and other parties where required by law or to protect our rights for our operational business purposes:

A. Identifiers such as a real name, alias, postal address, telephone or mobile contact number, unique personal identifier, online identifier, Internet Protocol address, email address and account name.

F. Internet or other electronic network activity information, such as browsing history, search history, online behaviour, interest data, and interactions with our and other websites, applications, systems and advertisements.

H. Audio, electronic, visual and similar information, such as images and audio, video or call recordings created in connection with our business activities.

I. Professional or employment-related information, such as job title as well as work history and experience in presenter bios collected for events, presentations, marketing collateral and testimonials in connection with our business activities.

K. Inferences drawn from any of the personal information listed above to create a profile or summary about, for example, an individual’s preferences and characteristics.

K+C does not sell personal information to third parties within the scope of the application of the CCPA.

Consumer Rights

You have the right to request that we disclose to you

(i) the categories of personal information we collected about you and the categories of sources from which we collected such information;
(ii) the specific pieces of personal information we collected about you;
(iii) the business or commercial purpose for collecting personal information about you; and
(iv) the categories of personal information about you that we shared or disclosed and the categories of third parties with whom we shared or to whom we disclosed such information in the preceding 12 months. You also have the right to request that we delete personal information we collected from you subject to certain exceptions.

You also have the right to not be discriminated against in pricing and services because you exercise any of your rights under the CCPA. K+C does not offer financial incentives or price or service differences to consumers in exchange for the retention or sale of a consumer’s personal information.

How to Make a Request

You may make a request for the disclosures or deletion described above by contacting our Data Protection Team on data.protection@kinandcarta.com

You may be required to submit proof of your identity for these requests to be processed as a verifiable consumer request. We may not be able to comply with your request if we are unable to confirm your identity or to connect the information you submit in your request with personal information in our possession. You may designate an authorised agent to make a request on your behalf subject to proof of identity and authorisation. We will respond to your request consistent with the CCPA, which does not apply to certain information, such as information made available from government records, and certain other laws, and where its application is pre-empted by, or in conflict with, federal law or the United States or California Constitution.

Changes

We will update this CCPA Notice from time to time. Any changes will be posted on this page with an updated revision date.